News
Aesto Health AWS Breach Hits HHS Portal at 9.54 Million Patients Across 30 Provider Clients, Including Everside Health · Data BreachTheGentlemen Ransomware Group Threatens Nutex Health's 27-Hospital Network; Class Action Filed Days After SEC Disclosure · Data BreachOCR Settles with California Eye Care Provider Azul Vision for Failure to Provide Timely Patient Record Access — 55th Right of Access Enforcement Action · OCR EnforcementShinyHunters Claims Leak of 7.1 Million Baxter International Salesforce Records Including Patient PII · Data BreachCareCloud EHR Vendor Breach Exposes Medical and Financial Data of 345,000 Patients · Data BreachOptalis Management Solutions and Other HIPAA-Regulated Entities Disclose Patient Data Breaches Affecting Thousands · Data BreachFive Small Healthcare Organizations Disclose Patient Data Breaches: Family Medical Associates of Raleigh, Arkansas Oral & Maxillofacial Surgeons, Alpine Agency of the Midlands, Princeton Family Eye Care, and Others · Data BreachAesto Health AWS Breach Hits HHS Portal at 9.54 Million Patients Across 30 Provider Clients, Including Everside Health · Data BreachTheGentlemen Ransomware Group Threatens Nutex Health's 27-Hospital Network; Class Action Filed Days After SEC Disclosure · Data BreachOCR Settles with California Eye Care Provider Azul Vision for Failure to Provide Timely Patient Record Access — 55th Right of Access Enforcement Action · OCR EnforcementShinyHunters Claims Leak of 7.1 Million Baxter International Salesforce Records Including Patient PII · Data BreachCareCloud EHR Vendor Breach Exposes Medical and Financial Data of 345,000 Patients · Data BreachOptalis Management Solutions and Other HIPAA-Regulated Entities Disclose Patient Data Breaches Affecting Thousands · Data BreachFive Small Healthcare Organizations Disclose Patient Data Breaches: Family Medical Associates of Raleigh, Arkansas Oral & Maxillofacial Surgeons, Alpine Agency of the Midlands, Princeton Family Eye Care, and Others · Data Breach
Beginnerfront deskpractice managerprovidervendor

Your HIPAA basics checklist

How to use medcomply.ai's plain-English checklist to see gaps before they become investigations.

TL;DR

Use the interactive checklist to track training, BAAs, workstations, and more. Progress saves in your browser so you can work through it over time.

Updated 2026-04-21

This short article pairs with our interactive HIPAA checklist, a practical way to see whether your basics are covered.

Why a checklist helps

Compliance is not one big project you finish once. It is a set of promises your practice makes to patients and regulators: we train people, we lock systems, we have BAAs, we respond when things break.

The checklist turns those promises into yes/no questions you can actually answer.

How to use it

  1. Open the full checklist.
  2. Choose your role filter if you want a shorter list.
  3. Check items off as you verify them, saves on this device.
  4. Use PDF export before a leadership meeting or share a link with your team.

What to do with gaps

Do not hide them. Prioritize essentials first, Notice of Privacy Practices, training, workstation locks, BAAs for vendors with PHI, and a named privacy official for covered entities.

Then schedule make-up tasks like risk assessments and policy updates.

Keep reading

Next in your reading path → Do we need a Privacy Officer?

Not legal advice. Educational overview only; consult qualified counsel for your situation.